Data Privacy Risk Manager

Aion Bank is a fully regulated European bank and credit institution, combining Vodeno's cutting-edge, private blockchain-based platform with its ECB banking license, strong balance sheet, and deep regulatory expertise. Our mission is to provide a comprehensive suite of embedded banking solutions, enabling businesses to seamlessly integrate financial services into their offerings.

As part of the UniCredit Group, Aion Bank and Vodeno will accelerate their digital banking offer in strategic markets and will act as a sandbox for innovation for the wider UniCredit Group. Aion Bank and Vodeno's existing Banking-as-a-Service (BaaS) offering across key European markets, including Germany and Poland, will see the bank embed its services - ranging from account access and deposits to lending, payments and loyalty programs - directly into non-banking digital platforms, facilitating seamless customer experiences.

At Aion Bank, our biggest strength is our people—a team of highly intelligent, creative, and ambitious professionals who thrive in a fast-paced, innovative environment. We believe in delivering results while fostering a culture of passion and collaboration.

We are currently looking for a Data Privacy Risk Manager ready to join our adventure, share our ambition and help shape the future of digital banking.

We are looking for an experienced Data Privacy Risk Manager to act as an Independent Control Function, ensuring UniCredit's compliance with GDPR and supporting the DPO by being responsible for:

• GDPR Assurance: Monitor and assess business compliance with GDPR, national laws, and internal policies.
• Controls & Risk: Design controls; conduct targeted risk assessments and Privacy by Design reviews for new products.
• Incident Response: Execute Data Protection Impact Assessments (DPIAs), advise on cross-border data transfers, and coordinate data breach incident management.
• Third-Party Risk: Verify vendor due diligence and ensure compliant Data Processing Agreements (DPAs).
• Advisory: Advise internal teams (Legal, IT, Product) on privacy requirements and support DPO regulatory engagement.
• Training: Drive staff awareness and monitor regulatory changes.

• 5+ years of experience in Data Protection, Compliance, or Risk Management within the Financial Sector (banking/fintech)
• Deep, practical expertise in GDPR, EU data protection law and data subject laws.
• Proven experience in a Second Line of Defence (2LoD) or senior privacy/DPO role.
• Bachelor's Degree (Law, Compliance, Risk, Finance etc.).
• Excellent communication skills. English fluency is mandatory.
• Practical understanding of risk management methodologies and internal control frameworks.
• Data privacy certifications are a significant advantage.
• Ability to leverage your strong organizational and problem-solving skills to efficiently juggle complex tasks, meet critical deadlines, and anticipate challenges before they arise.

You will get an opportunity to work in an innovative, digital bank applying state of the art approaches and technologies.

Unless limited by banking regulations we offer a flexible form of contract.

You will be provided an Individual Development Budget, dedicated to enhancing your professional skills.

If your role permits, we also offer flexible work location: home/office — according to your preference.

You and your closest family will be covered with VIP-level private medical care which includes dental treatment and a hospitalisation package.

We care for our colleagues' well being, therefore we cover psychological consultations if you ever feel you need such support.

Aion bank account without fee.

We co-sponsor your Multisport card and cover 50% of its cost.

You will work on computer equipment that delivers the best user experience — Apple MacBook.

If you feel like working from the office, we have beautiful space available for you in Brussels and Warsaw. Each office is very nicely located with convenient commute options by public transport and by bike. Our office in Warsaw offers healthy snacks throughout the day.

We keep our recruiting process simple.

Step 1: Talk with one of our Recruiters about your to date experiences and ambitions

Step 2: Meet with your future Team Manager to deep dive on the role specifics and our work environment

Diverse teams really are the best teams. Research shows that some candidates may hesitate to apply for a job unless they meet every requirement. If you are excited about working with us, we encourage you to apply - even if you're not 100% sure. We are interested in getting to know you and learning about what you bring to the table.

Please note that we may close a job posting early if we receive a large number of exceptional applications.

Good luck

Apply for this job

Read more about what we do on our LinkedIn profile.